If this is your first visit, be sure to
check out the Forum Rules by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

WEP not cracked after 250K packets?

What am I doing wrong?

I'm running airodump-ng and specifying my MAC, so I'm only collecting on one network. I've collected over 1.6 million beacons (although they don't help cracking) and 257,000+ data packets, but aircrack-ng in another tab isn't yet successful.

Re: WEP not cracked after 250K packets?

Originally Posted by crweedon

try increasing the "fudgefactor"

aircrack-ng -f 4 cap01.cap

sometimes this is the difference between cracking in 250,000 ivs and 5,000 ivs

Interesting. By the time I cracked it (~2M beacons, 350k data packets, 75k IVs) I also noticed that the number of IVs wasn't nearly as high as the number of packets. I usually have 80% of my data packets including IVs, but this time it was closer to 25%. So I guess the number of IVs was still in the "normal" range for cracking the password, but it's strange that I had to collect so many data packets to get there.

I'll work on the -f switch, thanks for that tip. Am I right in reading that it'll take longer (trying a broader range of keys), but can often require fewer captured IVs?

Re: WEP not cracked after 250K packets?

Originally Posted by eeepclover

Interesting. By the time I cracked it (~2M beacons, 350k data packets, 75k IVs) I also noticed that the number of IVs wasn't nearly as high as the number of packets. I usually have 80% of my data packets including IVs, but this time it was closer to 25%. So I guess the number of IVs was still in the "normal" range for cracking the password, but it's strange that I had to collect so many data packets to get there.

I'll work on the -f switch, thanks for that tip. Am I right in reading that it'll take longer (trying a broader range of keys), but can often require fewer captured IVs?

Yes, you read that correctly.

But keep your eye on the ball: For purposes of cracking WEP, beacon count matters not. It's the data packets count that you require.

Last edited by kidFromBigD; 05-10-2010 at 04:58 PM.
Reason: keeping MY eye on the ball a bit better...

But keep your eye on the ball: For purposes of cracking WEP, beacon count matters not. It's the data packets count that you require.

I agree, beacon count is pointless, but it's the IVs in the data packets that count, right? Not just data packets.

Originally Posted by kidFromBigD

Yes, you read that correctly.

But keep your eye on the ball: For purposes of cracking WEP, beacon count matters not. It's the data packets count that you require.

It's really the IVs that matter, not the data packets, right? What do you see is usually the relationship between the two? I know that "most data packets have IVs", but is it 60%? 95%? What do you usually see?